-
-
[旧帖]
请教高手现在新出来的一种叫Deepsea的混淆工具混淆的DLL,怎么还原?
0.00雪花
-
发表于:
2010-11-20 10:09
5000
-
[旧帖] 请教高手现在新出来的一种叫Deepsea的混淆工具混淆的DLL,怎么还原?
0.00雪花
主要是对silverlight的DLL进行混淆,混淆过来都是数字之类的,还有名称经过了混淆,如下:
this.Ⴍ.Text = Ⴜ.ႼႠ(0x4f32ca7a);
this.Ⴀ.Visibility = Visibility.Collapsed;
this.Ⴀ.Text = Ⴜ.ႼႠ(0x4f32ca7a);
this.Ⴄ.Text = ႷႭ.Ⴗ.ႼႠ(0x4f32ca6f);
this.Ⴃ.Text = ႷႭ.Ⴄ.ႼႠ(0x214577a3);
while ((sender as Button).Content.ToString() == ႷႭ.Ⴈ.ႼႠ(0x214577c9))
{
if (0x2b3 <= (0x2b3 - 0x2a1))
{
return;
}
this.Ⴍ++;
this.Ⴍ.Source = this.Ⴍ[this.Ⴍ].Source;
if (this.Ⴍ != this.Ⴈ)
{
return;
}
if (((0x1ba + (0x1ba * 0x1ba)) % 2) == 0)
{
this.Ⴍ.Content = Ⴓ.ႼႠ(0x4f32cae6);
if (0x201 > (0x201 - 0xb1))
{
return;
}
}
}
Label_0033:
if (this.Ⴍ != null)
{
if (0x2e <= (0x2e - 5))
{
return;
}
goto Label_009D;
}
Label_0083:
this.Close();
while (true)
{
if (((0x27a + (0x27a * 0x27a)) % 2) == 0)
{
return;
}
goto Label_0083;
}
Label_009D:
this.Ⴍ();
if (((0x124 + (0x124 * 0x124)) % 2) == 0)
{
goto Label_0083;
}
goto Label_0033;
}
[课程]Linux pwn 探索篇!